MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0d495798c88eb7d76913fedafbbb412f42308ae72fc656cb83d9aa5165e7dc51. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	0d495798c88eb7d76913fedafbbb412f42308ae72fc656cb83d9aa5165e7dc51
SHA3-384 hash:	3d0d2f4543e355b75a5c507c820cbb4279625508b11e9d521adc6d57b9a7b2347ef10b51ef41f30d919b3af340bb1987
SHA1 hash:	bd583ad342c38f4163c5642bedbb5f1737dd1c8c
MD5 hash:	c47df3eb9281f60b0eda64f1e09a8c15
humanhash:	pasta-kentucky-johnny-pennsylvania
File name:	chisel_1.11.5_linux_armv5.apk
Download:	download sample
Signature	Chisel Alert Create hunting rule
File size:	4'262'042 bytes
First seen:	2026-03-23 03:40:48 UTC
Last seen:	Never
File type:	gz
MIME type:	application/gzip
ssdeep	98304:OqCjL+Zbg32GAEHG2uAmTzjVYOJnhfEhQa7760dePuUGaP6lpVE4:OHjqZb6ybuOBJkWulTm4
TLSH	T127163346C9C2DFB90781540C9E32A151DE667C1B69ADD4312929C7CB39C36AFABCBF40
Magika	gzip
Reporter	MagoniaResearch
Tags:	apk attack-tool Chisel gz linux v1.11.5

signalblur

GitHub attack tool: jpillora/chisel release v1.11.5

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

407

Origin country :

US

File Archive Information

This file archive contains 1 file(s), sorted by their relevance:

Relevant files 1

File name:	chisel
File size:	10'092'706 bytes
SHA256 hash:	87b736b05bbb1aa0d9d9b8551ff0ca5ddee165213768dae303504202daff9c61
MD5 hash:	0fda134e93158f0500430501921747e6
MIME type:	application/x-executable
Signature	Chisel

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

Unix.Tool.HTTPTunnel-10058782-0

Alert

Create hunting rule

PUA.Win.Exploit.CVE_2012_1461-1

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=69c0b665aacb4c376b12ec5b

Tags:

n/a

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/0d495798c88eb7d76913fedafbbb412f42308ae72fc656cb83d9aa5165e7dc51

Kaspersky OpenTIP Adware

Verdict:

Adware

File Type:

gz

Link:

https://opentip.kaspersky.com/0d495798c88eb7d76913fedafbbb412f42308ae72fc656cb83d9aa5165e7dc51/results?tab=lookup

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ARCHIVE

Link:

https://malprob.io/report/0d495798c88eb7d76913fedafbbb412f42308ae72fc656cb83d9aa5165e7dc51

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/0d495798c88eb7d76913fedafbbb412f42308ae72fc656cb83d9aa5165e7dc51/

ReversingLabs TitaniumCloud Linux.Hacktool.Chisel

Threat name:

Linux.Hacktool.Chisel

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-03-23 03:41:27 UTC

File Type:

Binary (Archive)

Extracted files:

3

AV detection:

8 of 24 (33.33%)

Threat level:

  1/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=bvevpggir235o2it73npxo2bf5bdbcxhf7dfns4d3gvfczph3riq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery

Link:

https://tria.ge/reports/260323-g6vpescw91/

Behaviour

Enumerates kernel/hardware configuration

Reads runtime system information

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.30

Link:

https://yomi.yoroi.company/submissions/0d495798c88eb7d76913fedafbbb412f42308ae72fc656cb83d9aa5165e7dc51